> ## Documentation Index
> Fetch the complete documentation index at: https://docs.chief.bot/llms.txt
> Use this file to discover all available pages before exploring further.

# Compliance overview (DPA, privacy policy, terms)

> This page points you to Chief's security and compliance resources and explains, at a high level, how your data is protected.

This page points you to Chief's security and compliance resources and explains, at a high level, [how your data is protected](/help/security-privacy/data-retention-deletion).

## Security and compliance programs

Chief is built to support these standards and frameworks:

* **SOC 2 Type II**
* **GDPR**
* **HIPAA**

<Note>
  ℹ️ **Good to Know:** The third-party AI models Chief uses are [**not trained on your data**](/help/security-privacy/how-your-data-is-used-concept-and-whether-it-trains-ai). Your content is used to answer your questions, not to improve any model.
</Note>

## Policies and legal documents

* **Trust and Security:** [go.chief.bot/trust-and-security](https://go.chief.bot/trust-and-security)
* **Privacy Policy:** [chief.bot/privacy](https://chief.bot/privacy)
* **Terms of Service:** [go.chief.bot/TOS](https://go.chief.bot/TOS)

## Data Processing Agreement (DPA)

If your organization needs a signed Data Processing Agreement, [contact the Chief team](/help/help-feedback-whats-new/getting-help-in-chief). They can confirm DPA availability, the current SOC 2 report, and exact certification status for your security review.

<Warning>
  ⚠️ **Important:** Before citing specific certification dates, audit scopes, retention periods, or data-residency regions in a contract or RFP, get current confirmation from the Chief team — don't rely on this page alone for those specifics.
</Warning>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="Can I get a copy of your SOC 2 report?">
    Reports of this kind are typically shared under NDA. Contact the team via the Trust and Security page to request the current report.
  </Accordion>

  <Accordion title="Do you sign DPAs?">
    Reach out to the Chief team to arrange a Data Processing Agreement; they'll confirm availability and turnaround.
  </Accordion>

  <Accordion title="Where is my data stored?">
    If your organization has a specific data-residency requirement, confirm the current regions with the Chief team via the Trust and Security page.
  </Accordion>
</AccordionGroup>